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DETAILED ACTION 

1 . This is a Final Office Action in response to the communication filed on July 11, 2007. 

2. Claims 1-31 have been examined. 

3. Claims 1-31 are pending. 

Response to Arguments 

4. Applicant's arguments with respect to claims 1-31 have been considered but are moot in 
view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the Invention was made. 

6. Claims 1-22 and 28 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Geiger et al. (hereinafter referred to as Geiger, US Pat No.: 6, 463, 534) in view of Drews (US 
Pat. No.: 6,647,494). 

As per claim 1 : 

Geiger discloses a method of configuring a processing device, comprising the steps of: 
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accessing a certificate bound to the processing device (column 3: lines 14-21; column 4: 
lines 23-35, lines 59-67; figure 2: 100-102); and 

authenticating the certificate (column 11: lines 46-54; column 16: lines 10-43; lines 59- 
67; figure 2: 100-102). 

Geiger does not explicitly disclose reading configuration parameters from the certificate, 
if properly authenticated; configuring the processing device hardware responsive to the 
configuration parameters. Drews in analogous art, however, disclose reading configuration 
parameters from the certificate, if properly authenticated; configuring the processing device 
hardware responsive to the configuration parameters (Abstract; column 2: lines 60-67; column 3: 
lines 1-6; The configurable parameters set 45 includes an authorization certificate 42. The 
authorization certificate provides security information that client platform 30 uses to perform 
integrity checks and authenticate the sources of request messages or work orders that client 
platform 30 receives). Therefore, it would have been obvious to a person having ordinary skill in 
the art at the time the invention was made to modify the system disclosed by Geiger to include 
reading configuration parameters from the certificate, if properly authenticated; configuring the 
processing device hardware responsive to the configuration parameters. This modification would 
have been obvious because a person having ordinary skill in the art would have been motivated 
to do so to provide a system and method for checking authorization of remote configuration 
operations including generating a request credential manifest to request an update of 
configurable parameters on a client platform as suggested by Drews in (column 1 : lines 35-45). 

As per claim 6: 
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Geiger discloses a processing device comprising: 
processing circuitry (figure 1: 11); 

a memory coupled to the processing circuitry (figure 4: 452); 
wherein the processing circuitry: 

accesses a certificate bound to the processing device and stored in the memory (column 
3: lines 14-21; column 4: lines 23-35, lines 59-67; lines 59-67; figure 2: 100-102); 
and 

authenticates the certificate (column 11: lines 46-54; column 16: lines 10-43; lines 59-67; 
figure 2: 100-102). 

England does not explicitly disclose reading configuration parameters from the 
certificate, if properly authenticated; configuring the processing device hardware responsive to 
the configuration parameters. Drews in analogous art, however, disclose reading configuration 
parameters from the certificate, if properly authenticated; configuring the processing device 
hardware responsive to the configuration parameters (Abstract; column 2: lines 60-67; column 3: 
lines 1-6; The configurable parameters set 45 includes an authorization certificate 42. The 
authorization certificate provides security information that client platform 30 uses to perform 
integrity checks and authenticate the sources of request messages or work orders that client 
platform 30 receives). Therefore, it would have been obvious to a person having ordinary skill in 
the art at the time the invention was made to modify the system disclosed by Kavsan to include 
reading configuration parameters fi-om the certificate, if properly authenticated; configuring the 
processing device hardware responsive to the configuration parameters. This modification would 
have been obvious because a person having ordinary skill in the art would have been motivated 
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to do so to provide a system and method for checking authorization of remote configuration 
operations including generating a request credential manifest to request an update of 
configurable parameters on a client platform as suggested by Drews in (column 1: lines 35-45). 

As per claim 12: 

Geiger discloses a method of configuring a processing device, comprising the steps of: 

accessing a certificate bound to the processing device (column 3: lines 14-21; column 4: 
lines 23-35, lines 59-67; lines 59-67; figure 2: 100-102); and 

authenticating the certificate (column 11: lines 46-54; column 16: lines 10-43; lines 59- 
67; figure 2: 100-102). 

England does not explicitly disclose reading configuration parameters from the 
certificate, if properly authenticated; configuring the processing device hardware responsive to 
the configuration parameters. Drews in analogous art, however, disclose reading configuration 
parameters from the certificate, if properly authenticated; configuring the processing device 
hardware responsive to the configuration parameters (Abstract; disclosed by Drews in column 2: 
lines 40-55; column 2: lines 60-67; column 3: liries 1-6; The configurable parameters set 45 
includes an authorization certificate 42. The authorization certificate provides security 
information that client platform 30 uses to perform integrity checks and authenticate the sources 
of request messages or work orders that client platform 30 receives). Therefore, it would have 
been obvious to a person having ordinary skill in the art at the time the invention was made to 
modify the system disclosed by Kavsan to include reading configuration parameters from the 
certificate, if properly authenticated; configuring the processing device hardware responsive to 
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the configuration parameters. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so to provide a system and 
method for checking authorization of remote configuration operations including generating a 
request credential manifest to request an update of configurable parameters on a client platform 
as suggested by Drews in (column 1: lines 35-45). 

As per claim 17: 

Geiger discloses a processing device comprising: 
processing circuitry (figure 1: 11); 

a memory coupled to the processing circuitry (figure 4: 452); 
wherein the processing circuitry: 

accesses a certificate bound to the processing device and stored in the memory (column 
. 3: lines 14-21; column 4: lines 23-35, lines 59-67; lines 59-67; figure 2: 100-102); 
and 

authenticates the certificate (column 11: lines 46-54; column 16: lines 10-43; lines 59-67; 
figure 2: 100-102). 

England does not explicitly disclose reading configuration parameters from the 
certificate, if properly authenticated; configuring the processing device hardware responsive to 
the configuration parameters. Drews in analogous art, however, disclose reading configuration 
parameters from the certificate, if properly authenticated; configuring the processing device 
hardware responsive to the configuration parameters (Abstract; disclosed by Drews in column 2: 
lines 40-55; colxmm 2: lines 60-67; column 3: lines 1-6; The configurable parameters set 45 
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includes an authorization certificate 42. The authorization certificate provides security 
information that client platform 30 uses to perform integrity checks and authenticate the sources 
of request messages or work orders that client platform 30 receives). Therefore, it would have 
been obvious to a person having ordinary skill in the art at the time the invention was made to 
modify the system disclosed by Kavsan to include reading configuration parameters from the 
certificate, if properly authenticated; configuring the processing device hardware responsive to . 
the configuration parameters. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so to provide a system and 
method for checking authorization of remote configuration operations including generating a 
request credential manifest to request an update of configurable parameters on a client platform 
as suggested by Drews in (column 1 : lines 35-45). 

As per claims 2, 7 and 13: 

Geiger discloses a method, wherein the steps of accessing the certificate, authenticating 
the certificate, and reading configuration parameters from the certificate are performed whenever 
the processing device is initially powered (figure 2: 130; colvmin 6: lines 5-45). 

As per claims 3, 8, 14 and 19: 

Drews discloses a method and a processing device, wherein the steps of accessing the 
certificate, authenticating the certificate, and reading configuration parameters from the 
certificate are repeated upon a system reset/boot (figure 2: 130; column 6: lines 5-45; column 11: 
lines 26-30). 
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As per claims 4, 9, 15 and 20: 

Drews discloses a method and a processing device, wherein the configuring step includes 
the step of configuring performance characteristics of the hardware in the processing device 
responsive to the configuration parameters (figure 4: 60-69). 

As per claims 5, 10 and 16: 

Geiger discloses a method, wherein the configuring step includes the step of configuring 
software in the processing device responsive to the configuration parameters (column 10: lines 7- 
30). 



As per claim 1 1 : 

Geiger discloses a processing device, wherein the certificate can be created and modified 
only by the manufacturer of the processing device (column 17: lines 36-48). 

As per claim 18: 

Geiger discloses a processing device, wherein the processing circuitry accesses the 
certificate, authenticates the certificate, and reads configuration parameters whenever the 
processing device is initially powered (figure 2: 130; column 6: lines 5-45). 

As per claim 19: 
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Geiger discloses a processing device, wherein the processing circuitry accesses the 
certificate, authenticates the certificate, and reads configuration parameters upon a system 
reset/boot (figure 2: 130; column 6: lines 5-45; column 1 1 : lines 26-30). 

As per claim 21: 

Geiger discloses a processing device, wherein the processing circuitry configures 
software in the processing device responsive to the configuration parameters (column 4: lines 23- 
35; column 10: lines 7-30). 

As per claim 22: 

Geiger discloses a processing device, wherein the certificate can be created and modified 
only by the manufacturer of the processing device (column 17: lines 36-48). 

Allowable Subject Matter 

7. Claims 23-27 and 29-3 1 are objected to as being dependent upon a rejected base claim, 
but would be allowable if rewritten in independent form including all of the limitations of the 
base claim and any intervening claims. 

The following is a statement of reasons for the indication of allowable subject matter: 
There are an increasing needs to verify the origin and integrity of system firmware. To meet this 
needs a processing device is configured by accessing a certificate bound to the processing device 
and authenticating the certificate. Configuration parameters are read from the certificate, if 
properly the certificate is authenticated. The processing device is configured responsive to the 
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configuration parameters. The invention provides that the certificate protects the configuration 
parameters fi-om being altered by the user or a third party and only a manufacturer or a party 
authorized by the manufacturer can change configuration settings of the hardware. 

Conclusion 

8. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

See the notice of reference cited in form PTO-892 for additional prior art. 

9. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this acfion. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 



■ • 
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Contact Information 

10. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Techane J. Gergiso whose telephone number is (571) 272-3784 
and fax number is XiSSIBSSISS^ilSM. , The examiner can normally be reached on 9:00am - 6:00pm. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Emmanuel Moise can be reached on (571) 272-3865, The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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